fluxbox/fluxbox — pull request #1 by rpavlik (2011-10-31 15:42:22+00:00)
Title: FbTk/StringUtil.cc: Fix out-of-range memory access.

if pos is not npos, it will always be less than filename.size().
However, the access later is only safe if there is a character
after pos, which would require pos + 1 to be less than filename.size.

This means that calling expandFilename with just ~ may produce an out of range memory access without this patch.